Company : Etinars Location : Brussels Brussels From : Talent BE
WHAT WE ARE LOOKING FOR DevSecOpsEngineer(NATOSECRETsecuritycleared) The NATO Communications and Information Agency (NCI Agency) has moved towards short-cyclic capability development via NATO Software Factory (NSF) services.
NSF is a development and testing DevSecOps Platform hosted in Microsoft Azure Cloud, designed to enable the use of standardized secure software engineering processes and common tooling shared by Alliance Federation, Industry, Academia and Nations.
NCI Agency is looking for a DevSecOpsengineer with a strong background on C#/.NET development, Azure PaaS services, containerization technology (compliancy and security assessment, implementing and maintaining base layers, and assist with complex containerized deployments and infrastructure as code (kustomize, ARM, TerraForm) to support the NSF team.
Required Security Clearance:
NATO SECRET YOUR TASKS Under the direction / guidance of the NCIA Point of Contact or delegated staff, the DevSecOpsengineer will support building the NATO Trusted Container service and Integration Testing service.
This includes the following activities:
Technical Leadership for assigned activities Develop / update Azure DevOps pipelines Implement security scanning for containers Develop and maintain secure common base layers for containers, including applying required hardening settings Develop / maintain infrastructure as code for deployment and configuration of infrastructure (VMs, Disks), core services (AD, CA, Exchange etc.), and applications (NATO and Commercial Application) Support NSF users with DevSecOps expertise Develop reusable deployment packages for Azure covering IaaS and PaaS services Support the development of internal tooling The contractor will be part of a team and will provide the service using an Agile and iterative approach during multiple sprints.
Each sprint is planned for a duration of 1 week.
The content and scope of each sprint will be agreed during the sprint-planning meeting.
YOUR SKILLS AND EXPERIENCE Relevant and recent experience in technical leadership.
Relevant and recent experience in building and securing containers.
Relevant and recent experience with container orchestration platforms.
Relevant and recent experience in developing infrastructure as code Strong track record in DevSecOps and has strong problem-solving skills.
Extensive and recent experience with and knowledge of Continuous integration and delivery, including the following tools and technologies and concepts:
Git (mandatory) Docker (mandatory) Azure DevOps (mandatory) Infrastructure as Code such as ARM Designing and implementing build/deploy pipelines Application security/code quality testing tools such as SonarQube, Checkmarx or OWASP Dependency Check Shift left/right testing using test automation tools such Junit/NUnit, Selenium, Protractor, Cucumber The candidate has extensive and recent experience with and knowledge of Continuous Operations, including the following tools and technologies and concepts:
Kubernetes (mandatory) Telemetry/Monitoring solutions such as Application Insights, Azure Monitor or Prometheus Helm Container Registry Container vulnerability scanning tools such as Trivy and Anchore The candidate has experience with and knowledge of developing application using C#/.NET and REACT/TypeScript.
The candidate has relevant and recent experience in using development tools (e.g.
NuGet, GraphQL, PowerShell) and the Scrum methodology.
The candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure.
The candidate is able to speak and write fluent English since the work is conducted in English.
The candidate must have the nationality of one of the NATO nations.
Due to the particular nature of a large international organisation such as the European Commission, candidates should also have the following non-technical skills:
Capability of integration in an international/multicultural environment, rapid self-starting capability and experience in working in team Ability to work in multi-cultural environment, on multiple large projects Excellent Team Player Ability to understand, speak and write English C1 High degree of discretion and integrity is required as the applications managed and maintained contain personal and confidential data SECURITY The security classification of the service will be up to NATO SECRET.
The contractor is required to hold a valid NATO SECRETsecurity clearance.
The Security Clearance can be also in progress.
The contractor can start on NU Level while the Security Clearance is complete.
EXTRA INFORMATION The services shall be performed on-site at NATO HQ in Brussels, Belgium.
International environment The competence level will be tested during interview.
In case the information about the competence level filled in the CV are not true, this may lead to refusal of candidate.
Please note that, due to the sensitive nature of the data involved, this position is currently available only to individuals who meet the following criteria:
EU Citizens Once we receive your CV, we will take time to evaluate it carefully.
Should there be a match for this or any other position at Etinars, we will be in touch with you.
In case there is no match now don’t worry, we will make sure to keep your CV in consideration for future vacancies! In Etinars we are committed to supporting Diversity and Inclusion Community.
If you identify as part of it and you meet the minimum criteria for the job, you will be given the opportunity to demonstrate your abilities at an interview. Etinars BrusselsBrussels
